./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 34b47c00ac265c7154b048b065075686f0b0d02157935b615817b802464c404c --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-06 23:02:41,962 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-06 23:02:41,963 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-06 23:02:41,986 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-06 23:02:41,986 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-06 23:02:41,987 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-06 23:02:41,988 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-06 23:02:41,990 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-06 23:02:41,992 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-06 23:02:41,993 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-06 23:02:41,994 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-06 23:02:41,995 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-06 23:02:41,995 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-06 23:02:41,996 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-06 23:02:41,997 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-06 23:02:41,999 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-06 23:02:41,999 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-06 23:02:42,000 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-06 23:02:42,002 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-06 23:02:42,004 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-06 23:02:42,005 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-06 23:02:42,007 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-06 23:02:42,009 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-06 23:02:42,010 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-06 23:02:42,013 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-06 23:02:42,014 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-06 23:02:42,014 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-06 23:02:42,015 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-06 23:02:42,016 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-06 23:02:42,017 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-06 23:02:42,018 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-06 23:02:42,019 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-06 23:02:42,020 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-06 23:02:42,020 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-06 23:02:42,022 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-06 23:02:42,022 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-06 23:02:42,023 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-06 23:02:42,023 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-06 23:02:42,023 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-06 23:02:42,024 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-06 23:02:42,025 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-06 23:02:42,025 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-06 23:02:42,043 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-06 23:02:42,043 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-06 23:02:42,043 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-06 23:02:42,043 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-06 23:02:42,044 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-06 23:02:42,044 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-06 23:02:42,044 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-06 23:02:42,045 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-06 23:02:42,045 INFO L138 SettingsManager]: * Use SBE=true [2021-12-06 23:02:42,045 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-06 23:02:42,045 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-06 23:02:42,045 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-06 23:02:42,045 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-06 23:02:42,045 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-06 23:02:42,046 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-06 23:02:42,047 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-06 23:02:42,047 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-06 23:02:42,047 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-06 23:02:42,047 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:02:42,047 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-06 23:02:42,047 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-06 23:02:42,047 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-06 23:02:42,047 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-06 23:02:42,048 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-06 23:02:42,048 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-06 23:02:42,048 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-06 23:02:42,048 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-06 23:02:42,048 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-06 23:02:42,048 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 34b47c00ac265c7154b048b065075686f0b0d02157935b615817b802464c404c [2021-12-06 23:02:42,240 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-06 23:02:42,256 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-06 23:02:42,257 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-06 23:02:42,258 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-06 23:02:42,259 INFO L275 PluginConnector]: CDTParser initialized [2021-12-06 23:02:42,259 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec5_product62.cil.c [2021-12-06 23:02:42,299 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/data/16d2699ac/2b817843bc464fd585dda8da2024402f/FLAG389c67cfb [2021-12-06 23:02:42,735 INFO L306 CDTParser]: Found 1 translation units. [2021-12-06 23:02:42,735 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/sv-benchmarks/c/product-lines/minepump_spec5_product62.cil.c [2021-12-06 23:02:42,744 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/data/16d2699ac/2b817843bc464fd585dda8da2024402f/FLAG389c67cfb [2021-12-06 23:02:42,754 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/data/16d2699ac/2b817843bc464fd585dda8da2024402f [2021-12-06 23:02:42,756 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-06 23:02:42,757 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-06 23:02:42,759 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-06 23:02:42,759 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-06 23:02:42,761 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-06 23:02:42,762 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:02:42" (1/1) ... [2021-12-06 23:02:42,763 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@325658c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:42, skipping insertion in model container [2021-12-06 23:02:42,763 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.12 11:02:42" (1/1) ... [2021-12-06 23:02:42,768 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-06 23:02:42,802 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-06 23:02:43,011 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/sv-benchmarks/c/product-lines/minepump_spec5_product62.cil.c[19180,19193] [2021-12-06 23:02:43,015 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:02:43,022 INFO L203 MainTranslator]: Completed pre-run [2021-12-06 23:02:43,071 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/sv-benchmarks/c/product-lines/minepump_spec5_product62.cil.c[19180,19193] [2021-12-06 23:02:43,072 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-06 23:02:43,086 INFO L208 MainTranslator]: Completed translation [2021-12-06 23:02:43,086 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43 WrapperNode [2021-12-06 23:02:43,086 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-06 23:02:43,087 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-06 23:02:43,087 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-06 23:02:43,088 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-06 23:02:43,094 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,109 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,136 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 297 [2021-12-06 23:02:43,137 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-06 23:02:43,138 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-06 23:02:43,138 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-06 23:02:43,138 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-06 23:02:43,144 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,144 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,147 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,147 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,152 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,156 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,158 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,160 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-06 23:02:43,161 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-06 23:02:43,161 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-06 23:02:43,161 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-06 23:02:43,162 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (1/1) ... [2021-12-06 23:02:43,169 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-06 23:02:43,178 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:02:43,188 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-06 23:02:43,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-06 23:02:43,225 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-06 23:02:43,225 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-06 23:02:43,225 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-06 23:02:43,226 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-06 23:02:43,226 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-06 23:02:43,226 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-06 23:02:43,226 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-06 23:02:43,226 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 23:02:43,226 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 23:02:43,227 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-06 23:02:43,227 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-06 23:02:43,227 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 23:02:43,227 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-06 23:02:43,227 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-06 23:02:43,227 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-06 23:02:43,228 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-06 23:02:43,228 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-06 23:02:43,228 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-06 23:02:43,228 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-06 23:02:43,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-06 23:02:43,228 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-06 23:02:43,229 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-06 23:02:43,229 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-06 23:02:43,229 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-06 23:02:43,295 INFO L236 CfgBuilder]: Building ICFG [2021-12-06 23:02:43,297 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-06 23:02:43,545 INFO L277 CfgBuilder]: Performing block encoding [2021-12-06 23:02:43,551 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-06 23:02:43,551 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-06 23:02:43,552 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:02:43 BoogieIcfgContainer [2021-12-06 23:02:43,553 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-06 23:02:43,554 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-06 23:02:43,554 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-06 23:02:43,557 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-06 23:02:43,557 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.12 11:02:42" (1/3) ... [2021-12-06 23:02:43,558 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4068710c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:02:43, skipping insertion in model container [2021-12-06 23:02:43,558 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.12 11:02:43" (2/3) ... [2021-12-06 23:02:43,559 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4068710c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.12 11:02:43, skipping insertion in model container [2021-12-06 23:02:43,559 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:02:43" (3/3) ... [2021-12-06 23:02:43,560 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product62.cil.c [2021-12-06 23:02:43,565 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-06 23:02:43,565 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-06 23:02:43,601 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-06 23:02:43,606 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-06 23:02:43,606 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-06 23:02:43,619 INFO L276 IsEmpty]: Start isEmpty. Operand has 114 states, 84 states have (on average 1.3571428571428572) internal successors, (114), 94 states have internal predecessors, (114), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-06 23:02:43,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-06 23:02:43,626 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:43,626 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:43,627 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:43,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:43,630 INFO L85 PathProgramCache]: Analyzing trace with hash 1960372766, now seen corresponding path program 1 times [2021-12-06 23:02:43,637 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:43,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [21944323] [2021-12-06 23:02:43,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:43,638 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:43,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:43,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-06 23:02:43,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:43,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-06 23:02:43,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:43,797 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:43,798 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:43,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [21944323] [2021-12-06 23:02:43,799 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [21944323] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:43,799 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:43,799 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-06 23:02:43,801 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403226838] [2021-12-06 23:02:43,801 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:43,806 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-06 23:02:43,806 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:43,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-06 23:02:43,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 23:02:43,835 INFO L87 Difference]: Start difference. First operand has 114 states, 84 states have (on average 1.3571428571428572) internal successors, (114), 94 states have internal predecessors, (114), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 23:02:43,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:43,863 INFO L93 Difference]: Finished difference Result 219 states and 294 transitions. [2021-12-06 23:02:43,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-06 23:02:43,865 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-06 23:02:43,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:43,872 INFO L225 Difference]: With dead ends: 219 [2021-12-06 23:02:43,872 INFO L226 Difference]: Without dead ends: 105 [2021-12-06 23:02:43,875 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-06 23:02:43,878 INFO L933 BasicCegarLoop]: 144 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:43,878 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:02:43,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2021-12-06 23:02:43,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 105. [2021-12-06 23:02:43,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 77 states have (on average 1.2987012987012987) internal successors, (100), 86 states have internal predecessors, (100), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-06 23:02:43,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 135 transitions. [2021-12-06 23:02:43,913 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 135 transitions. Word has length 32 [2021-12-06 23:02:43,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:43,913 INFO L470 AbstractCegarLoop]: Abstraction has 105 states and 135 transitions. [2021-12-06 23:02:43,914 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 23:02:43,914 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 135 transitions. [2021-12-06 23:02:43,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-06 23:02:43,916 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:43,916 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:43,917 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-06 23:02:43,917 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:43,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:43,917 INFO L85 PathProgramCache]: Analyzing trace with hash -526010073, now seen corresponding path program 1 times [2021-12-06 23:02:43,918 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:43,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323663694] [2021-12-06 23:02:43,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:43,918 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:43,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:43,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-06 23:02:43,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:43,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-06 23:02:43,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:43,983 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:43,983 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:43,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323663694] [2021-12-06 23:02:43,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323663694] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:43,983 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:43,984 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:02:43,984 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685948034] [2021-12-06 23:02:43,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:43,985 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:02:43,985 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:43,986 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:02:43,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:02:43,986 INFO L87 Difference]: Start difference. First operand 105 states and 135 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 23:02:44,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:44,007 INFO L93 Difference]: Finished difference Result 174 states and 224 transitions. [2021-12-06 23:02:44,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:02:44,008 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-06 23:02:44,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:44,010 INFO L225 Difference]: With dead ends: 174 [2021-12-06 23:02:44,010 INFO L226 Difference]: Without dead ends: 96 [2021-12-06 23:02:44,011 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:02:44,012 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 13 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:44,013 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 227 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:02:44,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-06 23:02:44,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-06 23:02:44,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-06 23:02:44,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2021-12-06 23:02:44,024 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 33 [2021-12-06 23:02:44,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:44,024 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2021-12-06 23:02:44,024 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-06 23:02:44,024 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2021-12-06 23:02:44,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-06 23:02:44,026 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:44,026 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:44,026 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-06 23:02:44,026 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:44,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:44,027 INFO L85 PathProgramCache]: Analyzing trace with hash -1914406272, now seen corresponding path program 1 times [2021-12-06 23:02:44,027 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:44,027 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [842374214] [2021-12-06 23:02:44,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:44,027 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:44,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 23:02:44,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-06 23:02:44,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,100 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:44,101 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:44,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [842374214] [2021-12-06 23:02:44,101 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [842374214] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:44,101 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:44,102 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-06 23:02:44,102 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1478779874] [2021-12-06 23:02:44,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:44,102 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-06 23:02:44,103 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:44,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-06 23:02:44,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:02:44,103 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 23:02:44,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:44,124 INFO L93 Difference]: Finished difference Result 184 states and 239 transitions. [2021-12-06 23:02:44,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-06 23:02:44,124 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-06 23:02:44,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:44,126 INFO L225 Difference]: With dead ends: 184 [2021-12-06 23:02:44,126 INFO L226 Difference]: Without dead ends: 96 [2021-12-06 23:02:44,128 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-06 23:02:44,129 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 113 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:44,130 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [113 Valid, 121 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-06 23:02:44,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-06 23:02:44,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-06 23:02:44,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 80 states have internal predecessors, (92), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-06 23:02:44,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 122 transitions. [2021-12-06 23:02:44,140 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 122 transitions. Word has length 38 [2021-12-06 23:02:44,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:44,141 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 122 transitions. [2021-12-06 23:02:44,141 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-06 23:02:44,141 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 122 transitions. [2021-12-06 23:02:44,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-06 23:02:44,143 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:44,143 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:44,143 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-06 23:02:44,143 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:44,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:44,144 INFO L85 PathProgramCache]: Analyzing trace with hash 1685949316, now seen corresponding path program 1 times [2021-12-06 23:02:44,144 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:44,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053890481] [2021-12-06 23:02:44,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:44,144 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:44,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 23:02:44,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 23:02:44,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-06 23:02:44,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-06 23:02:44,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,206 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:44,206 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:44,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053890481] [2021-12-06 23:02:44,206 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1053890481] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:44,206 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:44,207 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-06 23:02:44,207 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800988400] [2021-12-06 23:02:44,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:44,208 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-06 23:02:44,208 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:44,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-06 23:02:44,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-06 23:02:44,209 INFO L87 Difference]: Start difference. First operand 96 states and 122 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 23:02:44,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:44,341 INFO L93 Difference]: Finished difference Result 273 states and 351 transitions. [2021-12-06 23:02:44,341 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-06 23:02:44,342 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-12-06 23:02:44,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:44,344 INFO L225 Difference]: With dead ends: 273 [2021-12-06 23:02:44,345 INFO L226 Difference]: Without dead ends: 185 [2021-12-06 23:02:44,345 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:02:44,347 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 194 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:44,347 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [201 Valid, 237 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:02:44,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2021-12-06 23:02:44,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2021-12-06 23:02:44,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 134 states have (on average 1.2686567164179106) internal successors, (170), 143 states have internal predecessors, (170), 22 states have call successors, (22), 17 states have call predecessors, (22), 22 states have return successors, (33), 24 states have call predecessors, (33), 22 states have call successors, (33) [2021-12-06 23:02:44,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 225 transitions. [2021-12-06 23:02:44,372 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 225 transitions. Word has length 51 [2021-12-06 23:02:44,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:44,372 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 225 transitions. [2021-12-06 23:02:44,373 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-06 23:02:44,373 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 225 transitions. [2021-12-06 23:02:44,375 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-06 23:02:44,375 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:44,375 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:44,375 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-06 23:02:44,375 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:44,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:44,381 INFO L85 PathProgramCache]: Analyzing trace with hash -1718008340, now seen corresponding path program 1 times [2021-12-06 23:02:44,381 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:44,381 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [41273407] [2021-12-06 23:02:44,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:44,382 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:44,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 23:02:44,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 23:02:44,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:44,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:02:44,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-06 23:02:44,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,479 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-06 23:02:44,479 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:44,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [41273407] [2021-12-06 23:02:44,480 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [41273407] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:44,480 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:44,480 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-06 23:02:44,480 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1034690423] [2021-12-06 23:02:44,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:44,481 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-06 23:02:44,481 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:44,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-06 23:02:44,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:02:44,481 INFO L87 Difference]: Start difference. First operand 179 states and 225 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 23:02:44,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:44,681 INFO L93 Difference]: Finished difference Result 362 states and 456 transitions. [2021-12-06 23:02:44,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-06 23:02:44,682 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2021-12-06 23:02:44,683 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:44,684 INFO L225 Difference]: With dead ends: 362 [2021-12-06 23:02:44,685 INFO L226 Difference]: Without dead ends: 191 [2021-12-06 23:02:44,685 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:02:44,686 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 162 mSDsluCounter, 409 mSDsCounter, 0 mSdLazyCounter, 246 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 527 SdHoareTripleChecker+Invalid, 292 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 246 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:44,687 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [169 Valid, 527 Invalid, 292 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 246 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:02:44,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2021-12-06 23:02:44,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 177. [2021-12-06 23:02:44,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 141 states have internal predecessors, (164), 22 states have call successors, (22), 17 states have call predecessors, (22), 22 states have return successors, (33), 24 states have call predecessors, (33), 22 states have call successors, (33) [2021-12-06 23:02:44,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 219 transitions. [2021-12-06 23:02:44,706 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 219 transitions. Word has length 59 [2021-12-06 23:02:44,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:44,706 INFO L470 AbstractCegarLoop]: Abstraction has 177 states and 219 transitions. [2021-12-06 23:02:44,707 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 23:02:44,707 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 219 transitions. [2021-12-06 23:02:44,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 23:02:44,708 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:44,708 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:44,708 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-06 23:02:44,709 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:44,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:44,709 INFO L85 PathProgramCache]: Analyzing trace with hash -12885391, now seen corresponding path program 1 times [2021-12-06 23:02:44,709 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:44,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914582284] [2021-12-06 23:02:44,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:44,710 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:44,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 23:02:44,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 23:02:44,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:44,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:02:44,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 23:02:44,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,791 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:44,791 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:44,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914582284] [2021-12-06 23:02:44,792 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [914582284] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:44,792 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:44,792 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:02:44,792 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057889237] [2021-12-06 23:02:44,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:44,793 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:02:44,793 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:44,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:02:44,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:02:44,794 INFO L87 Difference]: Start difference. First operand 177 states and 219 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 23:02:44,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:44,899 INFO L93 Difference]: Finished difference Result 356 states and 455 transitions. [2021-12-06 23:02:44,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:02:44,899 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-12-06 23:02:44,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:44,901 INFO L225 Difference]: With dead ends: 356 [2021-12-06 23:02:44,901 INFO L226 Difference]: Without dead ends: 187 [2021-12-06 23:02:44,902 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:02:44,903 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 81 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:44,903 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [86 Valid, 433 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:02:44,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2021-12-06 23:02:44,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 180. [2021-12-06 23:02:44,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 135 states have (on average 1.237037037037037) internal successors, (167), 144 states have internal predecessors, (167), 22 states have call successors, (22), 17 states have call predecessors, (22), 22 states have return successors, (33), 24 states have call predecessors, (33), 22 states have call successors, (33) [2021-12-06 23:02:44,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 222 transitions. [2021-12-06 23:02:44,920 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 222 transitions. Word has length 65 [2021-12-06 23:02:44,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:44,920 INFO L470 AbstractCegarLoop]: Abstraction has 180 states and 222 transitions. [2021-12-06 23:02:44,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-06 23:02:44,920 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 222 transitions. [2021-12-06 23:02:44,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 23:02:44,921 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:44,921 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:44,922 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-06 23:02:44,922 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:44,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:44,922 INFO L85 PathProgramCache]: Analyzing trace with hash 1373318003, now seen corresponding path program 1 times [2021-12-06 23:02:44,922 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:44,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37851623] [2021-12-06 23:02:44,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:44,923 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:44,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 23:02:44,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 23:02:44,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:44,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:02:44,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 23:02:44,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:44,996 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:44,996 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:44,996 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37851623] [2021-12-06 23:02:44,996 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37851623] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:44,996 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:44,997 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-06 23:02:44,997 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [843845641] [2021-12-06 23:02:44,997 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:44,997 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-06 23:02:44,997 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:44,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-06 23:02:44,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-06 23:02:44,998 INFO L87 Difference]: Start difference. First operand 180 states and 222 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 23:02:45,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:45,100 INFO L93 Difference]: Finished difference Result 362 states and 460 transitions. [2021-12-06 23:02:45,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-06 23:02:45,101 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 65 [2021-12-06 23:02:45,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:45,102 INFO L225 Difference]: With dead ends: 362 [2021-12-06 23:02:45,102 INFO L226 Difference]: Without dead ends: 190 [2021-12-06 23:02:45,103 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-06 23:02:45,103 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 194 mSDsluCounter, 225 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 330 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:45,104 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [198 Valid, 330 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:02:45,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2021-12-06 23:02:45,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 182. [2021-12-06 23:02:45,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 137 states have (on average 1.2335766423357664) internal successors, (169), 146 states have internal predecessors, (169), 22 states have call successors, (22), 17 states have call predecessors, (22), 22 states have return successors, (33), 24 states have call predecessors, (33), 22 states have call successors, (33) [2021-12-06 23:02:45,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 224 transitions. [2021-12-06 23:02:45,115 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 224 transitions. Word has length 65 [2021-12-06 23:02:45,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:45,115 INFO L470 AbstractCegarLoop]: Abstraction has 182 states and 224 transitions. [2021-12-06 23:02:45,115 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-06 23:02:45,115 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 224 transitions. [2021-12-06 23:02:45,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-06 23:02:45,116 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:45,116 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:45,116 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-06 23:02:45,116 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:45,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:45,117 INFO L85 PathProgramCache]: Analyzing trace with hash 2074917877, now seen corresponding path program 1 times [2021-12-06 23:02:45,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:45,117 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776974231] [2021-12-06 23:02:45,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:45,117 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:45,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-06 23:02:45,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-06 23:02:45,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:45,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:02:45,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-12-06 23:02:45,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,183 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:45,183 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:45,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1776974231] [2021-12-06 23:02:45,183 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1776974231] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:45,183 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:45,183 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-06 23:02:45,184 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926013254] [2021-12-06 23:02:45,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:45,184 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-06 23:02:45,184 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:45,184 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-06 23:02:45,184 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-06 23:02:45,185 INFO L87 Difference]: Start difference. First operand 182 states and 224 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 23:02:45,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:45,350 INFO L93 Difference]: Finished difference Result 498 states and 640 transitions. [2021-12-06 23:02:45,351 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-06 23:02:45,351 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2021-12-06 23:02:45,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:45,354 INFO L225 Difference]: With dead ends: 498 [2021-12-06 23:02:45,354 INFO L226 Difference]: Without dead ends: 324 [2021-12-06 23:02:45,355 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-06 23:02:45,356 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 241 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:45,356 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [249 Valid, 363 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-06 23:02:45,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2021-12-06 23:02:45,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 322. [2021-12-06 23:02:45,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 322 states, 241 states have (on average 1.2074688796680497) internal successors, (291), 254 states have internal predecessors, (291), 42 states have call successors, (42), 35 states have call predecessors, (42), 38 states have return successors, (68), 43 states have call predecessors, (68), 42 states have call successors, (68) [2021-12-06 23:02:45,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 322 states to 322 states and 401 transitions. [2021-12-06 23:02:45,382 INFO L78 Accepts]: Start accepts. Automaton has 322 states and 401 transitions. Word has length 65 [2021-12-06 23:02:45,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:45,382 INFO L470 AbstractCegarLoop]: Abstraction has 322 states and 401 transitions. [2021-12-06 23:02:45,382 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-06 23:02:45,383 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 401 transitions. [2021-12-06 23:02:45,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-06 23:02:45,383 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:45,384 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:45,384 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-06 23:02:45,384 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:45,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:45,384 INFO L85 PathProgramCache]: Analyzing trace with hash 843636315, now seen corresponding path program 1 times [2021-12-06 23:02:45,384 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:45,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1868613164] [2021-12-06 23:02:45,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:45,385 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:45,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:02:45,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-06 23:02:45,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-06 23:02:45,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:45,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:02:45,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-06 23:02:45,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:45,480 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-06 23:02:45,480 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:45,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1868613164] [2021-12-06 23:02:45,480 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1868613164] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-06 23:02:45,480 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-06 23:02:45,480 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-06 23:02:45,480 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995072385] [2021-12-06 23:02:45,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-06 23:02:45,481 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-06 23:02:45,481 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:45,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-06 23:02:45,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-06 23:02:45,481 INFO L87 Difference]: Start difference. First operand 322 states and 401 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-06 23:02:46,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:46,031 INFO L93 Difference]: Finished difference Result 867 states and 1137 transitions. [2021-12-06 23:02:46,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-06 23:02:46,031 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) Word has length 69 [2021-12-06 23:02:46,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:46,034 INFO L225 Difference]: With dead ends: 867 [2021-12-06 23:02:46,035 INFO L226 Difference]: Without dead ends: 609 [2021-12-06 23:02:46,036 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 280 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2021-12-06 23:02:46,037 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 733 mSDsluCounter, 420 mSDsCounter, 0 mSdLazyCounter, 637 mSolverCounterSat, 303 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 738 SdHoareTripleChecker+Valid, 578 SdHoareTripleChecker+Invalid, 940 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 303 IncrementalHoareTripleChecker+Valid, 637 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:46,037 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [738 Valid, 578 Invalid, 940 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [303 Valid, 637 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-06 23:02:46,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 609 states. [2021-12-06 23:02:46,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 609 to 500. [2021-12-06 23:02:46,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 500 states, 373 states have (on average 1.198391420911528) internal successors, (447), 396 states have internal predecessors, (447), 66 states have call successors, (66), 50 states have call predecessors, (66), 60 states have return successors, (108), 66 states have call predecessors, (108), 66 states have call successors, (108) [2021-12-06 23:02:46,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 500 states to 500 states and 621 transitions. [2021-12-06 23:02:46,066 INFO L78 Accepts]: Start accepts. Automaton has 500 states and 621 transitions. Word has length 69 [2021-12-06 23:02:46,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:46,066 INFO L470 AbstractCegarLoop]: Abstraction has 500 states and 621 transitions. [2021-12-06 23:02:46,066 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 4 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-06 23:02:46,066 INFO L276 IsEmpty]: Start isEmpty. Operand 500 states and 621 transitions. [2021-12-06 23:02:46,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-06 23:02:46,068 INFO L506 BasicCegarLoop]: Found error trace [2021-12-06 23:02:46,068 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:46,068 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-06 23:02:46,068 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-06 23:02:46,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-06 23:02:46,068 INFO L85 PathProgramCache]: Analyzing trace with hash 2033626689, now seen corresponding path program 1 times [2021-12-06 23:02:46,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-06 23:02:46,069 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694287414] [2021-12-06 23:02:46,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:46,069 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-06 23:02:46,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-06 23:02:46,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-06 23:02:46,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-06 23:02:46,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-06 23:02:46,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:46,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-06 23:02:46,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-06 23:02:46,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-06 23:02:46,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-06 23:02:46,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-06 23:02:46,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-06 23:02:46,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-06 23:02:46,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,182 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 23:02:46,182 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-06 23:02:46,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694287414] [2021-12-06 23:02:46,182 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694287414] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-06 23:02:46,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [731340731] [2021-12-06 23:02:46,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-06 23:02:46,183 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:02:46,183 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 [2021-12-06 23:02:46,184 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-06 23:02:46,184 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-06 23:02:46,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-06 23:02:46,267 INFO L263 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-06 23:02:46,275 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-06 23:02:46,508 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 31 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-06 23:02:46,508 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-06 23:02:46,701 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-06 23:02:46,701 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [731340731] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-06 23:02:46,701 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-06 23:02:46,701 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-06 23:02:46,701 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822348274] [2021-12-06 23:02:46,701 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-06 23:02:46,702 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-06 23:02:46,702 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-06 23:02:46,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-06 23:02:46,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-06 23:02:46,703 INFO L87 Difference]: Start difference. First operand 500 states and 621 transitions. Second operand has 15 states, 15 states have (on average 9.6) internal successors, (144), 10 states have internal predecessors, (144), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 6 states have call successors, (23) [2021-12-06 23:02:47,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-06 23:02:47,389 INFO L93 Difference]: Finished difference Result 1022 states and 1297 transitions. [2021-12-06 23:02:47,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2021-12-06 23:02:47,390 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.6) internal successors, (144), 10 states have internal predecessors, (144), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 6 states have call successors, (23) Word has length 123 [2021-12-06 23:02:47,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-06 23:02:47,391 INFO L225 Difference]: With dead ends: 1022 [2021-12-06 23:02:47,391 INFO L226 Difference]: Without dead ends: 0 [2021-12-06 23:02:47,393 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 316 GetRequests, 278 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 324 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=345, Invalid=1137, Unknown=0, NotChecked=0, Total=1482 [2021-12-06 23:02:47,394 INFO L933 BasicCegarLoop]: 232 mSDtfsCounter, 459 mSDsluCounter, 1032 mSDsCounter, 0 mSdLazyCounter, 1137 mSolverCounterSat, 220 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 463 SdHoareTripleChecker+Valid, 1264 SdHoareTripleChecker+Invalid, 1357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 220 IncrementalHoareTripleChecker+Valid, 1137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-06 23:02:47,394 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [463 Valid, 1264 Invalid, 1357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [220 Valid, 1137 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-06 23:02:47,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-06 23:02:47,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-06 23:02:47,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-06 23:02:47,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-06 23:02:47,395 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-12-06 23:02:47,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-06 23:02:47,395 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-06 23:02:47,395 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.6) internal successors, (144), 10 states have internal predecessors, (144), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 6 states have call successors, (23) [2021-12-06 23:02:47,395 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-06 23:02:47,395 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-06 23:02:47,397 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-06 23:02:47,419 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-06 23:02:47,598 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-06 23:02:47,600 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-06 23:02:49,848 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 203 210) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 2)) (not (<= 1 ~switchedOnBeforeTS~0))) [2021-12-06 23:02:49,848 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 203 210) no Hoare annotation was computed. [2021-12-06 23:02:49,848 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 203 210) no Hoare annotation was computed. [2021-12-06 23:02:49,849 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 93 99) no Hoare annotation was computed. [2021-12-06 23:02:49,849 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 93 99) the Hoare annotation is: true [2021-12-06 23:02:49,849 INFO L854 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 23:02:49,849 INFO L854 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 23:02:49,849 INFO L858 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2021-12-06 23:02:49,849 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2021-12-06 23:02:49,849 INFO L854 garLoopResultBuilder]: At program point L899(lines 894 902) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 23:02:49,849 INFO L854 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 23:02:49,849 INFO L858 garLoopResultBuilder]: For program point L146-1(lines 127 151) no Hoare annotation was computed. [2021-12-06 23:02:49,849 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 127 151) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 23:02:49,849 INFO L854 garLoopResultBuilder]: At program point L301(lines 286 304) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 127 151) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point L295(lines 295 299) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point L295-2(lines 295 299) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 222 230) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 222 230) the Hoare annotation is: true [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 222 230) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point L831-1(lines 827 838) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 827 838) the Hoare annotation is: true [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 827 838) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 905 934) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point L926(line 926) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 905 934) the Hoare annotation is: true [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point L919(lines 919 923) no Hoare annotation was computed. [2021-12-06 23:02:49,850 INFO L861 garLoopResultBuilder]: At program point L919-1(lines 919 923) the Hoare annotation is: true [2021-12-06 23:02:49,850 INFO L858 garLoopResultBuilder]: For program point L916(line 916) no Hoare annotation was computed. [2021-12-06 23:02:49,851 INFO L861 garLoopResultBuilder]: At program point L915-2(lines 915 929) the Hoare annotation is: true [2021-12-06 23:02:49,851 INFO L861 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: true [2021-12-06 23:02:49,851 INFO L858 garLoopResultBuilder]: For program point L911-1(line 911) no Hoare annotation was computed. [2021-12-06 23:02:49,851 INFO L861 garLoopResultBuilder]: At program point L930(lines 905 934) the Hoare annotation is: true [2021-12-06 23:02:49,851 INFO L854 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 23:02:49,851 INFO L858 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2021-12-06 23:02:49,851 INFO L854 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (or .cse8 (and .cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse5) (or .cse8 .cse0 .cse5 .cse6) (let ((.cse9 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse9 .cse4) .cse5 (and .cse2 .cse9 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 23:02:49,851 INFO L858 garLoopResultBuilder]: For program point L345-1(line 345) no Hoare annotation was computed. [2021-12-06 23:02:49,851 INFO L854 garLoopResultBuilder]: At program point L172(line 172) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-12-06 23:02:49,851 INFO L854 garLoopResultBuilder]: At program point L172-1(lines 153 177) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|)) (and .cse6 .cse3 .cse4))) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse6 .cse7) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse7) .cse5)) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse6 .cse8 .cse4) .cse5 (and .cse2 .cse8 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 23:02:49,851 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 66 92) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L854 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L330-1(line 330) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L161(lines 161 169) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L157(lines 157 174) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L347(lines 347 357) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L343(lines 343 360) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L854 garLoopResultBuilder]: At program point L343-1(lines 335 363) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not .cse7)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) .cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2) .cse4)) (let ((.cse8 (= ~waterLevel~0 1))) (or .cse3 .cse5 (and .cse6 .cse7 .cse8 .cse9) .cse4 .cse10 (and .cse1 .cse8 .cse9))) (or .cse0 .cse3 (and (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1|) (<= |timeShift_getWaterLevel_#res#1| 2) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse4 .cse10) (let ((.cse11 (<= ~waterLevel~0 2))) (or .cse3 .cse5 (and .cse1 .cse11 .cse9) .cse4 (and .cse6 .cse7 .cse11 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))))) [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L1008(line 1008) no Hoare annotation was computed. [2021-12-06 23:02:49,852 INFO L854 garLoopResultBuilder]: At program point L876(lines 871 879) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6 (and .cse7 .cse3 .cse4))) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse8 (and .cse7 .cse9) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse9) .cse5)) (or .cse8 .cse0 .cse5 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse6) (let ((.cse10 (<= ~waterLevel~0 2))) (or .cse0 .cse1 (and .cse7 .cse10 .cse4) .cse5 (and .cse2 .cse10 .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 23:02:49,852 INFO L858 garLoopResultBuilder]: For program point L348(lines 348 354) no Hoare annotation was computed. [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point L1009(lines 1004 1011) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 66 92) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-12-06 23:02:49,853 INFO L858 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point L332(lines 325 334) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse1 .cse4 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-06 23:02:49,853 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 92) no Hoare annotation was computed. [2021-12-06 23:02:49,853 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1008) no Hoare annotation was computed. [2021-12-06 23:02:49,853 INFO L858 garLoopResultBuilder]: For program point L807(lines 807 811) no Hoare annotation was computed. [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point L807-2(lines 803 814) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2) (or .cse0 .cse1 (and .cse3 (= ~waterLevel~0 1) .cse4) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-06 23:02:49,853 INFO L854 garLoopResultBuilder]: At program point L1043(lines 1038 1046) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 23:02:49,854 INFO L854 garLoopResultBuilder]: At program point L1035(lines 1031 1037) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point L416(lines 416 420) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 997) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L854 garLoopResultBuilder]: At program point L416-2(lines 408 421) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point L990-2(lines 990 997) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point L379(lines 378 425) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L858 garLoopResultBuilder]: For program point L408(lines 408 421) no Hoare annotation was computed. [2021-12-06 23:02:49,854 INFO L854 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 23:02:49,854 INFO L861 garLoopResultBuilder]: At program point L974(lines 966 976) the Hoare annotation is: true [2021-12-06 23:02:49,854 INFO L861 garLoopResultBuilder]: At program point L429(lines 368 433) the Hoare annotation is: true [2021-12-06 23:02:49,854 INFO L861 garLoopResultBuilder]: At program point L999(lines 980 1002) the Hoare annotation is: true [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L1028(lines 1024 1030) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 23:02:49,855 INFO L858 garLoopResultBuilder]: For program point L388(lines 388 394) no Hoare annotation was computed. [2021-12-06 23:02:49,855 INFO L858 garLoopResultBuilder]: For program point L388-1(lines 388 394) no Hoare annotation was computed. [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L322(lines 317 324) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 23:02:49,855 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-06 23:02:49,855 INFO L858 garLoopResultBuilder]: For program point L380(lines 380 384) no Hoare annotation was computed. [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L310(lines 305 312) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L426(lines 377 427) the Hoare annotation is: false [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L963(lines 959 965) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-06 23:02:49,855 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 404) no Hoare annotation was computed. [2021-12-06 23:02:49,855 INFO L858 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L423(lines 378 425) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-06 23:02:49,855 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 101 125) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point L120-1(lines 101 125) no Hoare annotation was computed. [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point L884(lines 884 890) no Hoare annotation was computed. [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point L193(lines 193 199) no Hoare annotation was computed. [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L191(line 191) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))))) [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L193-2(lines 186 202) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 .cse2 (and (= ~pumpRunning~0 0) .cse0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point L191-1(line 191) no Hoare annotation was computed. [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 101 125) no Hoare annotation was computed. [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L282(lines 267 285) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse1 .cse2 (and .cse0 (<= 2 ~waterLevel~0)))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L889(lines 880 893) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and .cse2 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2))))) [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L183(lines 178 185) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point L276(lines 276 280) no Hoare annotation was computed. [2021-12-06 23:02:49,856 INFO L854 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-06 23:02:49,856 INFO L858 garLoopResultBuilder]: For program point L276-2(lines 276 280) no Hoare annotation was computed. [2021-12-06 23:02:49,857 INFO L858 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2021-12-06 23:02:49,857 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2021-12-06 23:02:49,857 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 815 826) no Hoare annotation was computed. [2021-12-06 23:02:49,857 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 815 826) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse2 .cse3))) [2021-12-06 23:02:49,857 INFO L858 garLoopResultBuilder]: For program point L819-1(lines 815 826) no Hoare annotation was computed. [2021-12-06 23:02:49,857 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 211 221) the Hoare annotation is: true [2021-12-06 23:02:49,857 INFO L861 garLoopResultBuilder]: At program point L844(lines 839 847) the Hoare annotation is: true [2021-12-06 23:02:49,857 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 211 221) no Hoare annotation was computed. [2021-12-06 23:02:49,857 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 211 221) no Hoare annotation was computed. [2021-12-06 23:02:49,859 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-06 23:02:49,860 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-06 23:02:49,882 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.12 11:02:49 BoogieIcfgContainer [2021-12-06 23:02:49,882 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-06 23:02:49,882 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-06 23:02:49,882 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-06 23:02:49,882 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-06 23:02:49,883 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.12 11:02:43" (3/4) ... [2021-12-06 23:02:49,885 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-06 23:02:49,889 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-06 23:02:49,889 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-06 23:02:49,889 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-06 23:02:49,889 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-06 23:02:49,889 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-06 23:02:49,890 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-06 23:02:49,890 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-06 23:02:49,890 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-06 23:02:49,890 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-06 23:02:49,890 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-06 23:02:49,900 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-06 23:02:49,901 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-06 23:02:49,901 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-06 23:02:49,902 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-06 23:02:49,902 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-06 23:02:49,903 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 23:02:49,903 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-06 23:02:49,920 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 23:02:49,921 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-06 23:02:49,921 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 23:02:49,921 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 23:02:49,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-12-06 23:02:49,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-06 23:02:49,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-06 23:02:49,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-06 23:02:49,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) [2021-12-06 23:02:49,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-06 23:02:49,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-06 23:02:49,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) [2021-12-06 23:02:49,946 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-06 23:02:49,946 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-06 23:02:49,946 INFO L158 Benchmark]: Toolchain (without parser) took 7189.17ms. Allocated memory was 81.8MB in the beginning and 136.3MB in the end (delta: 54.5MB). Free memory was 43.0MB in the beginning and 105.0MB in the end (delta: -62.0MB). Peak memory consumption was 64.4MB. Max. memory is 16.1GB. [2021-12-06 23:02:49,947 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 81.8MB. Free memory is still 60.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:02:49,947 INFO L158 Benchmark]: CACSL2BoogieTranslator took 327.91ms. Allocated memory was 81.8MB in the beginning and 113.2MB in the end (delta: 31.5MB). Free memory was 42.9MB in the beginning and 81.3MB in the end (delta: -38.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-06 23:02:49,947 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.72ms. Allocated memory is still 113.2MB. Free memory was 81.3MB in the beginning and 78.6MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-06 23:02:49,947 INFO L158 Benchmark]: Boogie Preprocessor took 22.57ms. Allocated memory is still 113.2MB. Free memory was 78.6MB in the beginning and 77.1MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-06 23:02:49,948 INFO L158 Benchmark]: RCFGBuilder took 391.89ms. Allocated memory is still 113.2MB. Free memory was 77.0MB in the beginning and 58.7MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-06 23:02:49,948 INFO L158 Benchmark]: TraceAbstraction took 6327.71ms. Allocated memory was 113.2MB in the beginning and 136.3MB in the end (delta: 23.1MB). Free memory was 58.2MB in the beginning and 34.7MB in the end (delta: 23.5MB). Peak memory consumption was 52.8MB. Max. memory is 16.1GB. [2021-12-06 23:02:49,948 INFO L158 Benchmark]: Witness Printer took 63.87ms. Allocated memory is still 136.3MB. Free memory was 34.7MB in the beginning and 105.0MB in the end (delta: -70.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-06 23:02:49,950 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 81.8MB. Free memory is still 60.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 327.91ms. Allocated memory was 81.8MB in the beginning and 113.2MB in the end (delta: 31.5MB). Free memory was 42.9MB in the beginning and 81.3MB in the end (delta: -38.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.72ms. Allocated memory is still 113.2MB. Free memory was 81.3MB in the beginning and 78.6MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.57ms. Allocated memory is still 113.2MB. Free memory was 78.6MB in the beginning and 77.1MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 391.89ms. Allocated memory is still 113.2MB. Free memory was 77.0MB in the beginning and 58.7MB in the end (delta: 18.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 6327.71ms. Allocated memory was 113.2MB in the beginning and 136.3MB in the end (delta: 23.1MB). Free memory was 58.2MB in the beginning and 34.7MB in the end (delta: 23.5MB). Peak memory consumption was 52.8MB. Max. memory is 16.1GB. * Witness Printer took 63.87ms. Allocated memory is still 136.3MB. Free memory was 34.7MB in the beginning and 105.0MB in the end (delta: -70.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1008]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 114 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.3s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2233 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2190 mSDsluCounter, 4224 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2844 mSDsCounter, 783 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2532 IncrementalHoareTripleChecker+Invalid, 3315 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 783 mSolverCounterUnsat, 1380 mSDtfsCounter, 2532 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 487 GetRequests, 378 SyntacticMatches, 2 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 633 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=500occurred in iteration=9, InterpolantAutomatonStates: 102, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 10 MinimizatonAttempts, 146 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 53 LocationsWithAnnotation, 1198 PreInvPairs, 1399 NumberOfFragments, 1994 HoareAnnotationTreeSize, 1198 FomulaSimplifications, 641 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 53 FomulaSimplificationsInter, 9160 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 723 NumberOfCodeBlocks, 723 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 834 ConstructedInterpolants, 0 QuantifiedInterpolants, 1536 SizeOfPredicates, 3 NumberOfNonLiveVariables, 541 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 119/153 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 1031]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 803]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 894]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 966]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 368]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 178]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 1038]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 378]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1004]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 < tmp && \result <= 2) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && 1 == systemActive) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 959]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 286]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 2)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2021-12-06 23:02:49,995 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_151d6288-0c74-4936-a1dd-e5f4f0fa5071/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE